daily-viz
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: daily-viz Version: 1.0.0 The daily-viz skill is a legitimate tool for habit tracking and data visualization. It stores data locally in the user's home directory (~/.daily-viz/data/) and uses simple Node.js scripts (record.js and visualize.js) to manage records and generate ASCII charts. There is no evidence of data exfiltration, malicious execution, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your mood, sleep, exercise, work, and similar entries may remain on disk across sessions and can be used in later reports.
The skill intentionally persists personal daily tracking data in a local JSON store so it can be reused for later visualization and analysis.
Record mood, exercise, sleep, work hours ... 所有数据保存在 `~/.daily-viz/data/` 目录，支持：- 本地 JSON 存储
Install only if you are comfortable storing this personal data locally; avoid entering secrets and delete or back up ~/.daily-viz/data/records.json as needed.
The skill may depend on platform-specific command mapping or may not run through the package main entry point as expected.
The package entry point named here is not present in the supplied file manifest, while the included executable helpers are in scripts/. This creates invocation/provenance ambiguity but does not show malicious behavior.
"main": "index.js"
Prefer a release that declares the actual entry point and required runtime clearly, or inspect the included scripts before relying on it.